ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
False Positive? - Flock 2.5.5.en-US.win32.exe
thingjump2


Joined: 18 Dec 2009
Posts: 0
Reply with quote
Downloaded directly from flock.com, Clam insists there's a trojan here.

https://www.virustotal.com/analisis/bdc9810851d0ffeb5f59212123c921654079a569c1726fb0a2bae9801e0f1e2e-1261069065 Virus Total analysis is by no means unanimous. False positive?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I like to see at least 5 AVs spot an iinfected file, but that isn't enough on ViruslTotal. When you aren't sure, look at the names of the AVs. McAfee, Microsoft, Symantec, and Trend are high-profile AVs that have a lot of corporate users, and they can't afford to be wrong too often. If a couple of them spot an infection, it's probably for real. If none of them spot it, it may be a false positive. In this case, none of them spot anything, so I'd say it is a false positive.

For a definitive answer, you can upload a file to Threat Expert (from PC Tools' Threatfie people) at https://www.threatexpert.com/submit.aspx on the web. They will run the file for you and send a report to your email address. The report will give a threat ranking, tell what the file does, and where it was probably developed. If there is no threat ranking, despite what the file does, it is probably not infected.

Regards,
View user's profileSend private message
thingjump2


Joined: 18 Dec 2009
Posts: 0
Reply with quote
Thank you GuitarBob Very Happy
View user's profileSend private message
False Positive? - Flock 2.5.5.en-US.win32.exe
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic